Microsoft Private Public

Implement security through a pipeline using Azure DevOps (AZ-2001T00)

1 day

Learn to secure Azure DevOps pipelines, repositories, identities, permissions, secrets, variables, templates, and Azure Repos with guided hands-on practice.

Talk to a Learning Consultant Register for a Public Class Request a Private Class

Register or Request Training

Course Overview

This one-day course helps you prepare for the Implement Security Through a Pipeline assessment using Azure DevOps. Learn to configure and secure Azure Pipelines while practicing skills related to resource access, permissions, project and repository structure, templates, variables, parameters, secrets, and identity management.

Course Benefits

Configure secure access to pipeline resources.
Configure and validate user and pipeline permissions.
Structure projects and repositories to support secure pipelines.
Extend a pipeline by using multiple templates.
Securely use variables, parameters, credentials, and service secrets.
Manage identities for projects, pipelines, and agents.

Delivery Methods

Public Class
Live expert-led online training from anywhere. Guaranteed to run .

Private Class
Delivered for your team at your site or online.

Course Outline

Configure a Project and Repository Structure to Support Secure Pipelines
1. Organize project and repository structure
2. Configure secure projects and repositories
Manage Identity for Projects, Pipelines, and Agents
1. Configure a Microsoft-hosted pool
2. Configure agents for projects
3. Configure agent identities
4. Configure the scope of a service connection
5. Understand and convert to a managed identity
Configure Secure Access to Pipeline Resources
1. Configure agent pools
2. Use secret variables and variable groups
3. Understand secure files
4. Configure service connections
5. Manage environments
6. Secure repositories
Configure and Validate Permissions
1. Configure and validate user permissions
2. Configure and validate pipeline permissions
3. Configure and validate approval and branch checks
4. Manage and audit permissions
Extend a Pipeline to Use Multiple Templates
1. Create a nested template
2. Rewrite the main deployment pipeline
3. Configure the pipeline and application to use tokenization
4. Remove plain-text secrets
5. Restrict agent logging
6. Identify and conditionally remove script tasks
Configure Secure Access to Azure Repos from Pipelines
1. Configure pipeline access to packages
2. Configure pipeline access to credential secrets
3. Configure pipeline access to service secrets
4. Use Azure Key Vault to secure secrets
5. Explore and secure log files
Configure Pipelines to Securely Use Variables and Parameters
1. Ensure parameter and variable types
2. Identify and restrict insecure use of parameters and variables
3. Move parameters into a YAML file
4. Limit queue-time variables
5. Validate mandatory variables

Class Materials

Each student receives a comprehensive set of materials, including course notes and all class examples.

Class Prerequisites

Experience in the following is required for this Azure DevOps Services class:

Experience using the Azure portal to create resources such as Azure Key Vault and configure permissions.

Experience in the following would be useful for this Azure DevOps Services class:

Basic knowledge of Azure DevOps.
Basic knowledge of security concepts, including identities and permissions.

Have questions about this course?

We can help with curriculum details, delivery options, pricing, or anything else. Reach out and we’ll point you in the right direction.

Talk to a Learning Consultant